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In the Claims: 

Amend Claims 1, 7, 13, 17, 24,27,28,31, 34 as follows: 

1 1 . (currently amended) A system for authenticating an encryption 

2 key of a user at a r e mo te -client comput e r comouting device 

3 that may be remot e ly - networked to a server computer, 

4 comprising: a decrypt engine in the remote client computer for 

5 using a password provided by the user to decrypt in the remot e 

6 ciieat^computer an encrypted data file provided by the user so 

7 as to form a decrypted data file and so as to use the decrypted 

8 data file to form at least port of the e ncryption key of the user, 

9 without transmitting to the server either the password, the 
1 0 encrypted data file or the decrypted data file 

^ 7, ( pr e viou o ly currently^ amcnded) A method for providing an 

2 authenticated enciyption key of a user at a r e mot -e- client comput e r 

.3 computing device that may be r e motely networked to a server 

4 computer comprising the steps of: 

5 providing an encrypted data file to the remote client computer: 

6 providing a password to the remot e client computer: and 

7 decrypting the encrypted data file in the remote- client computer 

8 using the password so as to generate an authenticated 
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encryption key of t±ie user without transmitting the server either 
the password or, the encrypted data file. 



6 



8 



9 



10 



11 



13. {ciarrently amended) A computer accessible medium comprising 
; program instructions for providing at a remot e client computer 



computing device that mav be 



•networked to a server 



computer an authenticated enon'ption user ke y of a us e r ^ 
comprising the steps of: using a password provided by the user 
to decrypt in the remot e £ lieQt,computer an encrypted data file 
provided by the user so as to form a decrypted data file and so 
as to use the decrypted data file to form at least part of an 
authenticated e noiyption key of the user, without transmitting 
to the server either the password, the encrypted data file or the 
decrypted data file 



1 17. (currently amended) A system for authenticating an encryption 

2 key of a user, comprising: an input device at a Femote client 

3 computer computing device that mav be r e mo t e l^networked to 

4 a server computer for receiving a password provided by the 

5 user at the r emote client computer r emo t el- v ^ that mav be 

6 tietworked to a server computer; memory in the remote client 
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7 GQinput e r computing device f or storing an encrypted data file 

8 including an enciyption key of the user; and a decrypt engine 

9 in the remote client computer for using the password to decrypt 

10 the encrypted data file so as to form a decrypted data file and 

11 so as to use the decrypted data file to generate in the r e mot e 

12 cIient_computer an authenticated encryption key of a user, 

13 without transmitting to the server either the password, the 

14 encrypted data file or the deciypted data file 

1 24. (currently amended) A system for authenticating an enciyption 

2 key of a user at a r e mote client comput e r computing device 

3 that may be remotely networked to a server computer, 

4 comprising: an input device at the r e mot e client computer for 

5 receiving a password provided by the user; an RF smart card 

6 for storing an encrypted data file, the encrypted data file 

7 i i^luding being the encrypted source of on oncn i ^ption a user 

8 ke y of us e r ; a decrypt engine in the r e mote cIicnt_computer for 

9 using the password to decrypt the encrypted data file to 

10 generate in the remote cIient,computer an authenticated 

1 1 e ncryption key of the user, without transmitting to the server 

12 either the password, the encrypted data file or the decrypted 

13 data file; memory in the remot e client computer for storing the 

14 decrypt engine* 
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1 27- (currently amended) A system for authenticating an encryption 

2 key of a user at a r e mot e client comput e r computing device 

3 that may be r e mot e ly networked to a server computer, 

4 comprising: an input device at the r e mote client computer for 

5 receiving a password provided by the user; an RF smart card 

6 for storing an encrypted data file, the encrypted data file being 

7 the encrypted source of a v^set ke y th e e ncrypt e d data fil e 

8 in c luding an - encryption k e y of th e user and containing first 

9 biometric data of the user; a biometric reader for generating 

1 0 second biometric data of the user; a decrypt engine in the 

1 1 remote client computer for using the password to decrypt the 

12 encrypted data file so as to form a decrypted data file to 

13 . generate in the remot e client computer an authenticated 

14 e ncOTtion key of the user, if there is a probabalistic match 

15 between the first biometric data and the second biometric data 

16 without transmitting to the server either the password, the 

17 encrypted data file or the decrypted data file; 

1 28. (currently amended) A system for authenticating an encr3rption 

2 key of a user at a r e mot e c lient compute r- computing device 

3 that may be r e motely networked to a server computer, 

4 comprising: memoiy in the ^=effl©*e-£lienLcomputer for storing 

5 an encrypted encryption key; an input device at the remote 

6 client computer for receiving a password; a decrypt engine in 
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7 the remot e client computer for using the password to decrypt 

8 the encrypted data file so as to form a decrypted data file to 

9 generate in the remote clietiLcomputer an authenticated 

10 encjyption key of the user without transmitting to the server 

1 1 either the password, the encrypted data file or the decrypted 

12 data file; memory in the client computer for storing the decrypt 

13 engine without transmitting to the server either the password, 

14 the encrypted data file or the decrypted data file. 

1 31. (currently amended) A system for authenticating an encryption 

2 key of a user at a r e mote client computer computing device that may 

3 be _remotely networked to a server computer, comprising: memory in 

4 the remoto client computer for storing an encrypted encryption key 

5 and a first biometric data of the user; an input device at the y emote 

6 client computer for receiving a password; a biometric reader at the 

7 r e mote client computer for generating a second biometric data of the 

8 user; . a decrypt engine in the r e mot e client computer for comparing 

9 the first biometric data of the user with a second biometric data of the 

10 user and, if there is a probabilistic match, then using the password to 

1 1 decrypt the encrypted encryption key without transmitting to the 

12 server either the password, the encrypted data file or the decrypted 

13 data file, data of the user. 
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1 34. (currently amended) A method for authenticating an encryption 

2 key of a user at a r e moto - client comput e r computing device that may 

3 be remotely networked to a server computer, comprising the steps of: 

4 storing an encrypted key in memory in a remote computer; receiving 

5 a password provided by the user; and requiring use of the password in 

6 the remote computer to decrypt the encrypted encryption key so as to 

7 form a decrypted encryption key without transmitting to the server 

8 either the password or the encrypted encryption key. 
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